Black Hat USA 2017

89 talks · 2017 · indexed by Breach Arc Archive. Links open each talk on YouTube.

• ''Ghost Telephonist' Link Hijack Exploitations in 4G LTE CS Fallback 2017
• (in)Security in Building Automation: How to Create Dark Buildings with Light Speed 2017
• 2017 USA BHB 108 2017
• Advanced Pre-Breach Planning: Utilizing a Purple Team to Measure Effectiveness vs. Maturity 2017
• Adventures in Attacking Wind Farm Control Networks 2017
• All Your SMS & Contacts Belong to ADUPS & Others 2017
• An ACE Up the Sleeve: Designing Active Directory DACL Backdoors 2017
• Are Cyber-Attacks on the Power Grid Limited to Nation-State Actors? 2017
• Attacking Encrypted USB Keys the Hard(ware) Way 2017
• Automated Detection of Vulnerabilities in Black-Box Routers (and Other Network Devices) 2017
• Automated Testing of Crypto Software Using Differential Fuzzing 2017
• AVPASS: Leaking and Bypassing Antivirus Detection Model Automatically 2017
• Behind the Plexiglass Curtain: Stats and Stories from the Black Hat NOC 2017
• Betraying the BIOS: Where the Guardians of the BIOS are Failing 2017
• Big Game Theory Hunting: The Peculiarities of Human Behavior in the InfoSec Game 2017
• Black Hat USA 2017 Keynote 2017
• Bochspwn Reloaded: Detecting Kernel Memory Disclosure with x86 Emulation and Taint Tracking 2017
• Breaking the Laws of Robotics: Attacking Industrial Robots 2017
• Breaking the x86 Instruction Set 2017
• Breaking XSS Mitigations Via Script Gadgets 2017
• Broadpwn: Remotely Compromising Android and iOS via a Bug in Broadcom's Wi-Fi Chipsets 2017
• Bug Collisions Meet Government Vulnerability Disclosure 2017
• Challenges of Cooperation Across Cyberspace 2017
• Cloak & Dagger: From Two Permissions to Complete Control of the UI Feedback Loop 2017
• Comparing Security Curricula and Accreditations to Industry Needs 2017
• Cracking the Lens: Targeting HTTP's Hidden Attack-Surface 2017
• Datacenter Orchestration Security and Insecurity: Assessing Kubernetes, Mesos, and Docker at Scale 2017
• Defeating Samsung KNOX with Zero Privilege 2017
• Developing Trust and Gitting Betrayed 2017
• Digital Vengeance: Exploiting the Most Notorious C&C Toolkits 2017
• Escalating Insider Threats Using VMware's API 2017
• Evading Microsoft ATA for Active Directory Domination 2017
• Evil Bubbles or How to Deliver Attack Payload via the Physics of the Process 2017
• Evilsploit - A Universal Hardware Hacking Toolkit 2017
• Exploit Kit Cornucopia 2017
• Exploiting a Single SQLite Vulnerability Across Multiple Software 2017
• Exploiting Network Printers 2017
• Fad or Future? Getting Past the Bug Bounty Hype 2017
• Fighting the Previous War (aka: Attacking and Defending in the Era of the Cloud) 2017
• Firmware is the New Black - Analyzing Past Three Years of BIOS/UEFI Security Vulnerabilities 2017
• Fractured Backbone: Breaking Modern OS Defenses with Firmware Attacks 2017
• Free-Fall: Hacking Tesla from Wireless to CAN Bus 2017
• Friday the 13th: JSON Attacks 2017
• Game of Chromes: Owning the Web with Zombie Chrome Extensions 2017
• Go Nuclear: Breaking Radiation Monitoring Devices 2017
• Go to Hunt, Then Sleep 2017
• Hacking Hardware with a $10 SD Card Reader 2017
• Hacking Serverless Runtimes: Profiling AWS Lambda Azure Functions & More 2017
• Honey, I Shrunk the Attack Surface – Adventures in Android Security Hardening 2017
• How Abusing Docker API Led to Remote Code Execution, Same Origin Bypass & more 2017
• How We Created the First SHA-1 Collision and What it Means for Hash Security 2017
• Ichthyology: Phishing as a Science 2017
• Infecting the Enterprise: Abusing Office365+Powershell for Covert C2 2017
• Intel AMT Stealth Breakthrough 2017
• Intel SGX Remote Attestation is Not Sufficient 2017
• Intercepting iCloud Keychain 2017
• IoTCandyJar: Towards an Intelligent-Interaction Honeypot for IoT Devices 2017
• kR^X: Comprehensive Kernel Protection Against Just-In-Time Code Reuse 2017
• Lessons Learned in Influencing Security Stakeholders Inside and Outside Your Organization 2017
• Lies and Damn Lies: Getting Past the Hype of Endpoint Security Solutions 2017
• Making Diversity a Priority in Security 2017
• Network Automation is Not Your Safe Haven 2017
• Ochko123 - How the Feds Caught Russian Mega-Carder Roman Seleznev 2017
• OpenCrypto: Unchaining the JavaCard Ecosystem 2017
• Orange is the New Purple 2017
• PEIMA: Harnessing Power Laws to Detect Malicious Activities 2017
• Practical Tips for Defending Web Applications in the Age of DevOps 2017
• Protecting Pentests: Recommendations for Performing More Secure Tests 2017
• Protecting Visual Assets: Digital Image Counter-Forensics 2017
• Quantifying Risk in Consumer Software at Scale - Consumer Reports' Digital Standard 2017
• Redesigning PKI to Solve Revocation Expiration and Rotation Problems 2017
• Revoke-Obfuscation: PowerShell Obfuscation Detection (And Evasion) Using Science 2017
• rVMI: A New Paradigm for Full System Analysis 2017
• ShieldFS: The Last Word in Ransomware Resilient File Systems 2017
• Sonic Gun to Smart Devices: Your Devices Lose Control Under Ultrasound/Sound 2017
• The Active Directory Botnet 2017
• The Adventures of AV and the Leaky Sandbox 2017
• The Art of Securing 100 Products 2017
• The Epocholypse 2038: What's in Store for the Next 20 Years 2017
• The Future of ApplePwn - How to Save Your Money 2017
• The Industrial Revolution of Lateral Movement 2017
• The Legal Landscape for a Cybersecurity Professional Seeking to Safeguard Sensitive Client Data 2017
• The Shadow Brokers - Cyber Fear Game-Changers 2017
• They're Coming for Your Tools: Exploiting Design Flaws for Active Intrusion Prevention 2017
• Tracking Ransomware End to End 2017
• Web Cache Deception Attack 2017
• Why Most Cyber Security Training Fails and What We Can Do About it 2017
• WiFuzz: Detecting and Exploiting Logical Flaws in the Wi-Fi Cryptographic Handshake 2017
• Wire Me Through Machine Learning 2017